What is a limitation of IPv6 RA Guard?
A . It is not supported in hardware when TCAM is programmed
B . It does not offer protection in environments where IPv6 traffic is tunneled.
C . It cannot be configured on a switch port interface in the ingress direction
D . Packets that are dropped by IPv6 RA Guard cannot be spanned
Answer: B
Explanation:
Restrictions for IPv6 RA Guard
– The IPv6 RA Guard feature does not offer protection in environments where IPv6 traffic is tunneled.
– This feature is supported only in hardware when the ternary content addressable memory (TCAM) is programmed.
– This feature can be configured on a switch port interface in the ingress direction.
– This feature supports host mode and router mode.
– This feature is supported only in the ingress direction; it is not supported in the egress direction.
– This feature is not supported on EtherChannel and EtherChannel port members.
– This feature is not supported on trunk ports with merge mode.
– This feature is supported on auxiliary VLANs and private VLANs (PVLANs). In the case of PVLANs, primary VLAN features are inherited and merged with port features.
– Packets dropped by the IPv6 RA Guard feature can be spanned.
Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16-10/ip6f-xe-16-10-book/ip6-ra-guard.html#GUID-589AF00C-7499-439F-AD23-51005D61CAB7
Latest 300-410 Dumps Valid Version with 213 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund